Hi, thanks for the reply.
The courier-authlib is configured to work correctly (I'm using Courier IMAP)
at least with IMAP related things...
This is my /etc/courier/authlib/authldaprc
LDAP_URI ldap://ad.domain.com
LDAP_PROTOCOL_VERSION 3
LDAP_BASEDN ou=Users,dc=domain,dc=com
LDAP_TIMEOUT 5
LDAP_AUTHBIND 1
LDAP_MAIL mail
LDAP_DOMAIN domain.com
LDAP_GLOB_UID vmail
LDAP_GLOB_GID vmail
LDAP_HOMEDIR mailMessageStore
LDAP_MAILROOT /home/vmail/domains
LDAP_MAILDIR ./Maildir
LDAP_DEFAULTDELIVERY mailMessageStore
LDAP_MAILDIRQUOTA mailQuota
LDAP_FULLNAME cn
LDAP_DEREF never
LDAP_TLS 0
and nothing more.
Aha, Ok I see your point ;) You should be able to search for 'mail'
_and_ 'mailAddressAlias' within courier-authlib (and this isn't possible
as far as I know).
Why don't you use the postfix 'virtual_alias_maps' LDAP lookup map for
your 'mailAddressAlias' entries? That way postfix will perform a second
lookup for the final mailbox ('virtual_mailbox_maps') which is always an
'mail' attribute in your case. Afterwards courier-authlib needs only to
perform 'mail' attribute lookups, as specified above.
In your case this would be:
main.cf:
virtual_mailbox_maps = ldap:/etc/postfix/ldap-virtual_mailbox_maps.cf
virtual_alias_maps = ldap:/etc/postfix/ldap-virtual_alias_maps.cf
ldap-virtual_mailbox_maps.cf:
server_host = ldap://ad.server
version = 3
search_base = ou=Users,dc=domain,dc=com
query_filter = (&(objectClass=user)(mail=%s)(accountStatus=active))
result_attribute = mailMessageStore
result_format = %s/Maildir/
bind = no
ldap-virtual_alias_maps.cf:
server_host = ldap://ad.server
version = 3
search_base = ou=Users,dc=domain,dc=com
query_filter =
(&(objectClass=user)(mailAddressAlias=%s)(accountStatus=active))
result_attribute = mail
bind = no
hope this helps
Chris